Citrix Value-add to Microsoft Windows Terminal Services

Transcription

1 Value-add to Microsoft Terminal Services This document compares the base-level features within Terminal Services to the value-added features of several products, including Server TM, Essentials TM, and the Suite TM.

2 Performance and End User Experience Performance CPU Utilization Session Sharing Enhanced Performance Fast Printing Enhanced Printer Compatibility Bandwidth tuning Multimedia Support enhances the usability and performance of applications running on Terminal Services. This results in higher user satisfaction and eased support requirements for IT. In a shared, multi-user Terminal Services environment, one user s activities can adversely impact performance for other users. s CPU management feature ensures that a CPUintensive process initiated by one user does not degrade the performance of other sessions. When a user requests a second application on Terminal Services, the application is launched in the existing user session. This allows the application to start up almost instantly (as opposed to creating a wholly new session) and reduces memory and CPU consumption on the server. A Tolly Group study showed that Server delivered up to 43% faster application performance than Terminal Partial support with Server Enterprise Edition Services. A Tolly Group study showed that Server s Universal Printer Driver offers 2 to 3 times faster printing than Terminal Services. With Server s Universal Printer Driver, users have access to advanced printing properties like paper trays, sorting, stapling, and print preview. This enhances user productivity and reduces IT support requirements. IT administrators can ensure optimal performance by limiting the amount of bandwidth used by activities like printing and file transfer. This feature is particularly critical when users are connecting from branch offices over low-bandwidth WAN links. Without tuning features, other sessions from the branch office are likely to experience performance issues during the print job or file transfer. Supporting multimedia applications like Media Player (as is common with computer-based training applications) is not possible with Terminal Services, since remote display protocols do not provide for synchronized audio and video. s SpeedScreen Multimedia Acceleration feature provides synchronized audio-video delivery by intercepting the request for a media file on the Server, and streaming the media to the client where it can be rendered locally.

3 Support for highlatency network links Web Enhancements Session Reliability File Transfer Performance Automatic detection of SmartCardenabled applications Server-to-client URL redirection Client-to-server redirection of file types s accessed via Terminal Services over high-latency network links (i.e. satellite) may not provide adequate performance. s SpeedScreen Latency Reduction feature optimizes performance by echoing keystrokes and mouse clicks locally. This provides a far more usable experience for the end user and makes it possible to access applications over highlatency links. enhances the performance and usability of IE-based web applications running on Terminal Services. This is done by loading HTML text in the web page before GIF/JPEG images, so that users have immediate access to information. As the HTML pages load the images in the background, the images are progressively composed so that users don t have to wait until the entire page loads. When a network connection issue occurs, keeps the application window visible on the client device. This ensures that once the network issue is resolved, users do not have to re-login or restart the application. This is useful in situations where users roam between wireless hot spots or when a transient network issue occurs. When copying files over the network connection, improves the user experience by reducing wait times, especially for remote sessions where latency is high. provides enhancements to automatically detect applications that are smartcard-enabled. When clicking on URL s (such as HTTP or HTTPS links) within an application running on Terminal Services, the link is opened with the local client browser instead of launching the browser on the Terminal Server. This feature enhances support for mixed desktop/terminal Services environments, and ensures that the local browser and Internet connection is used for web browsing. This can reduce the bandwidth requirements for Internet connections within the data center, which would be used by browsers running within Terminal Services. can redirect requests for a specific document or file type to a Terminal Server session. For example, clicking on a Visio document on the client device will launch the document in a Visio application on the Terminal Sever, instead of a local application. This is a useful feature in environments where a particular application may not be installed locally, but users still need to have access to the file types served by that application.

4 Multi-monitor support for applications Bidirectional audio Prioritization of display data in presentation protocol Priority packet tagging Pass-thru authentication Mobility Reconnect to disconnected sessions SmoothRoaming Dynamic display reconfiguration Proximity printing Conferencing Manager allows the display of applications running on Terminal Services to be performed across multiple local monitors connected to the client workstation. Furthermore, the starting position of a particular application (such as the left or right-hand side monitor in a dual monitor environment) to be persistent across multiple sessions. Multi-monitor support is a common requirement in financial services environments. supports audio recording and playback on a client desktop, including use of Philips SpeechMike transcription devices. Bidirectional audio is a common requirement in medical and legal firms, and provides a foundation to support VoIP softphones in the future. offers enhanced application responsiveness with built-in quality of service for graphics applications. Enables the prioritization of virtual channel traffic by third-party Quality-of-Service (QoS) network infrastructure providers. For clients connected to the company directory, the credentials used for local device logon are passed automatically to sessions running on Terminal Services. This simplifies and speeds up the user s connection process. Allows users to reconnect to their Terminal Services sessions without going through the time-consuming logon process again. allows a user to roam between devices and networks while maintaining their sessions. This enhances user productivity in manufacturing shop floors, healthcare, and wireless mobility scenarios. Automatically adapts the existing Terminal Services session's display mode (i.e. resolution, color depth) to that of the reconnecting client device. Without this feature, a new user session would be established for the user, resulting in lower server scalability and lower user productivity. Enables users within a specified IP address range to automatically access the network printing devices that exist within that same range. This increases user productivity and lessens the IT support burden. With Enterprise Edition of Server Provides application sharing and collaboration among users that leverage the Terminal Services environment for their applications.

5 Panning and Scaling Smart and Configuration Supports the delivery of full-screen applications on small form factor devices using panning (scroll) and scaling (resize) functionality. Analyzes the integrity and identity of the device connecting to the network to determine what level of access should be granted to the user. enhances Terminal Services with a set of mature and easy-to-use management and monitoring tools. This increases IT and user productivity and provides additional capabilities not available in the base-level Terminal Services environment. Load Distribute connection requests to multiple servers using round-robin process Distribute load relative to session count, CPU, memory consumption Load Managed Server Groups ( Silos ) Geographically distributed servers in a farm Zone Preference and Failover availability scheduling and control Supports simple load management rule: connections are served by servers in a sequential order. Establishes user sessions across a group of load-managed servers based on configurable parameters like session count, CPU utilizations, memory consumption, time of day, etc. Provides the ability to isolate groups of servers to serve specific applications in a load managed fashion. This feature simplifies management and eliminates costly regression testing. provides a robust architecture that supports grouping and managing server farms that span multiple data centers. This ability provides business continuity and disaster recovery benefits. Establishes users sessions based on their proximity to and availability of a particular server. This feature enables higher performance in farms that span multiple data center and eases disaster recovery and business continuity. provides the ability to control delivery of applications to users based on time of day and number of session or application instances. Publishing Publish applications using Seamless Window Enables applications running on Terminal services to look and feel as if they are running locally.

6 Create desktop shortcuts to individual applications Publish applications to non- client platforms Central management of multi-server app publishing Content publishing Support for folders for application publishing Web application Shortcuts to Terminal Services applications can be made available on the user s local desktop. Allows non- (Mac, Unix, Linux, Java ) clients to access based applications. allows administrators to publish and maintain applications on multiple servers to multiple users at the same time. publishing is not required to be carried out from each individual server. extends the application publishing model to accommodate internal and external content. This is a useful feature for the creation of a simple remote access portal, as well as provisioning web applications accessed via the local browser along with client/server, web, and/or desktop applications executed on Terminal Services. allows applications to be grouped within folders for cleaner and easier organization for multiple user groups. portal Publish to web application portal Custom branding for web application portal Publish to third party enterprise information portal, including SharePoint Self-Service Password Change Support for multifactor authentication Allows for individual applications to be made available via web browser. Provides the ability to easily customize the look and feel of the web application portal according to customer requirements. Enhances enterprise information portals as a centralized point of access by including Terminal Services applications. Allows users to change passwords from the web application portal themselves, rather than requiring users to call their help desk. This feature is important for remote access scenarios and other situations where user devise do not authenticate to the directory. enhances the security of web application portals by easily integrating third-party multi-factor authentication solutions such as RSA SecurID and Secure Computing SafeWord. The token codes are integrated into the web application portal s authentication page along with the username and password.

7 Publish applications to non- clients Publish applications to any clients User specification of connection speed Multilingual user interface Advanced Control and End point analysis Print extends support for web application publishing to non- (Mac, Unix, Linux, Java) clients, with automatic download of the required Server client. also provides support for users with Mozilla Firefox and Netscape browsers. Allows older, legacy versions of to access applications running on Terminal Services. Users can specify their network connection speed/type for application access, thereby optimizing application performance. Dynamically changes the locale of the web application portal depending on the user s or administrator s preferences. Analyzes the integrity and identity of the device connecting to the network to determine the level of access granted. Client Printer management Enhanced printer compatibility Policy based assignment of client printers Session printer properties User, Server and Visibility Integrated Console for application publishing, load management, reporting, and, monitoring With, administrators are not required to install each printer driver on the Terminal Servers. Support for wide set of printer device types and functionalities. Printers can be assigned using a policy engine, allowing for conditional assignment of session printers (including the default printer) based on user name, server name, client name or IP address range. Administrators can set default printer properties for client printers, simplifying the user s process. Single, unified management console for all administrative tasks: application publishing, load management, user connection settings, and resource monitoring. All servers in a farm can be managed from one console.

8 Policies Delegated administration Resource Manager Installation Manager launch limits Multiple options for Configuration Database - Microsoft SQL, IBM DB2, Oracle database Integration with multiple 3rd party management consoles Native support for NT domains Native support for Active Directory Native support for Novell Directory Services Anonymous Compatibility Administrators can configure settings for user sessions as policies that can be applied to sessions based on username, group, server name, server management container, client IP address or subnet, client name (or partial name), or Smart zone. Priorities can be applied to these policies depending on specific user session situation. Allows administration tasks and permissions to be assigned across multiple groups within the IT department, such as the help desk, level 2 support, and the Terminal Services administration team. Provides the ability to monitor and evaluate server performance. Custom threshold-based alerts and reports can be generated to enhance management and growth of the Terminal Services farm. Automates the process of installing applications across multiple servers in a Terminal Services farm. Allows administrators to control user access to applications by setting time and instance limits. Supports existing corporate computing standards for other datacenter infrastructure components, such as Microsoft, IBM or Oracle. Provides a stable and secure architecture. Manage servers using 3 rd party management consoles like Microsoft Operations Manager, IBM Tivoli, HP OpenView, CA UniCenter. Allows for role-based access to be provided using NT domain users and groups. Allows for role-based access to be provided using any version of Active Directory. Allows for role-based access to be provided using Novell Directory Services (edirectory) Provides the ability to grant access to Terminal Services applications without requiring explicit authentication from the user. This can simply IT administration and enable support for additional authentication schemes like third-party LDAP directories. addresses the needs of today s heterogeneous IT environments by supporting a wide variety of devices and applications. Client Device Heterogeneity

9 Client platforms support Supported client platforms: Vista, 32-bit, 16-bit, DOS, Unix, Linux, Java, WinCE, Mac, IBM OS/2, Symbian, EPOC, PocketPC/ Mobile. Compatibility Virtual IP address support Isolation Environments Support for resolves compatibility issues for applications that require an unique IP address for each application instance. Without this feature, some applications are not able to be supported on Terminal Services. resolves compatibility issues for applications that are not compliant with the multi-user Terminal Services, including registry, file, and named object conflicts. USB devices Support for Pocket PC device using ActiveSync TWAIN scanner support Security and Control supports the synchronization of a client-connected USB PocketPC devices via Microsoft ActiveSync software running in Terminal Services. Allows applications running on Terminal Services to access TWAIN-compliant scanners connected to the client device. technologies enhance the security of a centralized architecture by providing additional security and control features. Secure remote access SSL Gateway Appliance-based SSL Gateway DMZ Traversal using SSL Policy-based access to client devices via SSL Gateway Appliance Advanced Control and End point analysis Provides SSL/TLS encryption and multifactor authentication to provide authorized application access to appropriate users. Universal SSL VPN appliance that provides a secure, always-on, single point-of-access to all applications and protocols. Provide access to corporate resources from anywhere and from behind any firewall, protecting sensitive information in the trusted zone. Supports existing DMZ traversal policies without opening additional ports. Administrators can enhance security and intellectual property containment by controlling users ability to connect client devices like printers and local drivers. Analyzes the integrity and identity of the device connecting to the network to determine the level of access granted.

10 Enterprise Single sign-on Policy based enterprise single sign-on for any application Self service network password reset Two-factor Requires users to logon only once with their network credentials and automates subsequent logons to applications access through a Web browser, client, or host terminal emulator. Specifies strong password characteristics such as length, character repetition and alphanumeric requirements on a perapplication basis applies to manual and automated password changes. Allows users to reset their domain password or unlock their account from their PC, thus reducing help desk costs for password resets. authentication Integration with two-factor authentication devices Integrates with most two-factor authentication devices like tokens, smartcards and biometrics to enhance security. Scalability Server and Farm Scalability Enterprise class scalability - proven large deployment support: over 1000 servers Session Sharing CPU Utilization enhances Terminal Services by supporting more users per server, thereby requiring fewer servers for the same number of users. In addition, allows the environment to be scaled out without increasing administration complexity, both on the network and within the server farm. Supports large server farms that can span WANs while maintaining performance and reliability. ensures that when a user requests a second application on a Terminal Server, the application is launched in the existing user session. This reduces memory and CPU consumption on the server, thereby supporting more users per server and requiring fewer servers. In a shared, multi-user Terminal Services environment, one user s activities can adversely impact performance for other users. s CPU management feature ensures that a CPUintensive process initiated by one user does not degrade performance of other sessions. As a result, additional Terminal Partial support with Server Enterprise Edition

11 Virtual Memory Optimizations Enhanced Single Server Scalability Network Scalability Reduced Bandwidth Consumption Servers do not need to be maintained to assure good user performance. Performs DLL rebasing for applications in order to reduce the amount of memory conflicts when loading DLLs, resulting in a reduction in overall memory requirements for some applications. This enables a single server to support more concurrent users, thereby reducing overall server count within a Terminal Services environment. s CPU utilization and virtual memory optimization features allow Server environments to be implemented with up to 25% fewer servers than a Terminal Services-only solution. A Tolly Group study showed that Server used 25-50% less bandwidth than Terminal Services. This ensures that the number of users can be scaled up without additional costs for network bandwidth Systems, Inc. All rights reserved., SpeedScreen, SmoothRoaming are registered trademarks of Systems, Inc. in the United States and other countries. Novell and Novell Directory Services are registered trademarks of Novell, Inc.,, NT, Active Directory, SharePoint, ActiveSync are registered trademarks of Microsoft Corporation. IBM, Tivoli, and DB2 are registered trademarks of IBM. Unicenter is a registered trademark of Computer Associates International, Inc. HP and OpenView are registered trademarks of Hewlett-Packard Company. Oracle is a registered trademark of Oracle Corporation. RSA SecurID is registered trademark of RSA Security Inc. SafeWord is a registered trademark of Secure Computing Corporation. All other trademarks and registered trademarks are the property of their respective owners.